Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Qf4hkxM8wWVVKJvmT1oHCGXKUJo5hy5oHYMT7f3msoC/0/34352e3232362e38342e302f32322d3234203d3e20323636393930.roa
File:                     34352e3232362e38342e302f32322d3234203d3e20323636393930.roa (raw, json)
Hash identifier:          /sgvbL9eFjAy39CjX2AZrk4kKIm6eNWlig2eaqF/Y6c=
Subject key identifier:   12:6A:D8:E4:49:97:B0:BE:5D:9D:96:AC:06:9A:6C:84:0F:94:1C:06
Certificate issuer:       /CN=76E04BE1FC1F97D1BA1670C615C3C26296EB1761
Certificate serial:       1F134E9832FBD97F543A108DF4A520A17789DAC2
Authority key identifier: 76:E0:4B:E1:FC:1F:97:D1:BA:16:70:C6:15:C3:C2:62:96:EB:17:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76E04BE1FC1F97D1BA1670C615C3C26296EB1761.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Qf4hkxM8wWVVKJvmT1oHCGXKUJo5hy5oHYMT7f3msoC/0/34352e3232362e38342e302f32322d3234203d3e20323636393930.roa
Signing time:             Sun 28 Jan 2024 00:09:13 +0000
ROA not before:           Sun 28 Jan 2024 00:04:13 +0000
ROA not after:            Sun 26 Jan 2025 00:09:13 +0000
asID:                     266990
IP address blocks:        45.226.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:13:4e:98:32:fb:d9:7f:54:3a:10:8d:f4:a5:20:a1:77:89:da:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76E04BE1FC1F97D1BA1670C615C3C26296EB1761
        Validity
            Not Before: Jan 28 00:04:13 2024 GMT
            Not After : Jan 26 00:09:13 2025 GMT
        Subject: CN=126AD8E44997B0BE5D9D96AC069A6C840F941C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7e:ae:f6:d0:35:6c:cf:1f:cb:fe:79:52:dc:
                    9d:dc:27:f9:bb:11:00:8c:e1:2b:c1:39:31:81:12:
                    f9:46:ee:09:ad:41:48:da:93:66:7e:53:c3:d0:cf:
                    86:ac:59:8a:76:0b:06:bf:2a:c2:ec:2d:e2:e4:d7:
                    dc:b5:95:8d:66:80:b2:8c:a8:5a:cd:19:98:4b:75:
                    22:ce:d9:c6:70:9c:0b:b5:7b:a9:c7:09:66:ff:a1:
                    89:cc:7e:7d:e6:c3:f1:ff:47:06:2a:eb:52:2e:db:
                    84:61:52:85:a0:d2:19:4b:68:5d:de:18:80:1b:1b:
                    4d:0b:84:6a:ad:13:27:0d:93:44:c6:0f:9c:79:81:
                    14:9c:86:4b:50:65:b1:4e:43:aa:f1:45:17:3a:df:
                    1d:b0:b2:fe:f5:64:7b:a9:43:61:86:10:3c:23:f7:
                    11:92:b1:70:29:b0:1c:ba:42:ce:99:3a:80:d5:b6:
                    c2:da:fa:30:15:05:7b:2d:7b:c1:46:ce:e9:5e:15:
                    d2:1e:9e:bb:ad:a7:80:5a:d0:50:71:91:fe:02:bb:
                    3c:1a:09:ed:2a:96:f3:6d:76:d3:84:54:d3:7a:6b:
                    67:5e:58:f9:03:6b:a8:3f:5f:e7:ef:42:cf:4b:5c:
                    92:05:e3:1a:9e:8e:7c:33:5e:4e:2a:d1:e3:da:86:
                    83:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:6A:D8:E4:49:97:B0:BE:5D:9D:96:AC:06:9A:6C:84:0F:94:1C:06
            X509v3 Authority Key Identifier:
                keyid:76:E0:4B:E1:FC:1F:97:D1:BA:16:70:C6:15:C3:C2:62:96:EB:17:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Qf4hkxM8wWVVKJvmT1oHCGXKUJo5hy5oHYMT7f3msoC/0/76E04BE1FC1F97D1BA1670C615C3C26296EB1761.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/76E04BE1FC1F97D1BA1670C615C3C26296EB1761.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Qf4hkxM8wWVVKJvmT1oHCGXKUJo5hy5oHYMT7f3msoC/0/34352e3232362e38342e302f32322d3234203d3e20323636393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:c1:aa:94:a3:1a:0c:f9:3e:1b:76:c9:13:4d:2c:6f:b6:1d:
         d2:b9:18:bb:ee:51:69:e5:d2:cd:b5:13:71:c9:ef:af:53:d4:
         6a:a2:a7:cc:0e:a5:0e:f7:c2:fb:0d:af:92:6b:26:82:88:de:
         d8:75:9c:c5:c1:5c:46:7d:7e:d2:77:7e:9c:14:aa:6f:3a:71:
         1d:5d:ef:2e:51:4f:f9:f1:15:3e:a4:99:c9:27:64:70:d5:19:
         37:8a:1b:9a:d9:8c:ca:01:b3:13:3e:c1:6b:9b:69:75:d6:27:
         f8:dc:f6:53:40:aa:2f:17:e2:81:89:b1:de:90:39:84:d6:83:
         89:3f:47:b9:89:eb:e9:da:c8:22:0d:c8:93:1b:ad:ec:8d:ee:
         3e:49:4f:97:10:ba:37:d9:fd:0c:32:8a:bf:81:de:37:ab:12:
         0e:29:f2:d2:4a:49:0d:58:be:d4:84:f2:5c:f3:08:cc:27:97:
         55:da:23:86:55:46:a4:c7:11:a1:cf:60:90:6d:01:f9:83:fb:
         2c:82:e8:d8:08:fe:f2:16:5a:f1:9b:77:e4:a3:d5:19:ee:20:
         31:eb:4c:ee:6f:e9:c4:71:38:3b:c6:67:fd:28:d1:89:83:da:
         0d:8f:ee:0d:76:0a:f1:5e:2e:7e:09:d1:b2:5a:f6:cf:6a:01:
         e5:f6:2c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org